Questions tagged [cisco]

The major provider of networking equipment. This is a generic tag to be used when no more specific tags are available. See the list of tags in Help Center Tag page.

Filter by
Sorted by
Tagged with
2
votes
2answers
4k views

What is the purpose of a switch routed port?

From my Cisco CCNA documentation: Routed ports are used for point-to-point links. Connecting WAN routers and security devices are examples of the use of routed ports. In a switched network, ...
4
votes
1answer
24 views

sFlow configuration tcam question for Cisco Nexus 9396PX platform

I am trying to configure sflow on Nexus 9396PX switch and having some difficulty to understand tcam region. hardware access-list tcam region span-sflow 256 ! feature sflow sflow counter-poll-interval ...
3
votes
1answer
53 views

What does it mean when default route is to a network address?

The default route as configured in a Cisco router is as shown below: Gateway of last resort is 103.0.0.0 to network 0.0.0.0 What I have came across so far is that the gateway of last resort is ...
0
votes
1answer
42 views

BGP route advertised but cannot Ping

I have this rather basic setup with 3 routers running BGP, each has Loopback int configured. Is there an extra step required for R2 to ping R4 Loopback interface despite it's being advertised? R2#sh ...
-1
votes
0answers
21 views

What is the first and last address of a subnet? Is it the Network/Broadcast or the First/Last usable address? [duplicate]

For a computer science exam the question was: Find the first and last address of the subnet containing XXX.XXX.XX.XX/XX I put the network and broadcast address and got it wrong. Those who put the ...
0
votes
1answer
37 views

DHCP Help 3560-CX + Aruba AP515

The problem VLAN 100 is not assigning IP address to the SSID Guest from the AP, but Aruba is Tagging the SSID to be VLAN 100. How do I get the Switch to assign the DHCP? On the switch, it seems to ...
0
votes
1answer
64 views

How do I apply an access list on a switch?

I'm configuring a very small network on packet tracer 8.0 and I have a single 2960-24TT switch which is connected to 2 PCs and 1 router. Everything is on the 24.17.2.0/24 network and I added a VLAN. I ...
0
votes
2answers
38 views

Cisco 800 Series ARPing's to ISP are Intermittant

According to my ISP, our occasional internet outages are do to a router configuration problem. They say the router must ARPing the ISP regularly. Failure to do so in 4 hours results in outgoing and ...
0
votes
0answers
13 views

Network switches and router integration [closed]

I have more than 70 users in my network. I just need to give them internet access. 56 will be in lab are their working nature will be same. Rest of the user belongs to HR and other departments and can ...
2
votes
1answer
27 views

Difference beetween MTU, ipv4 MTU and mpls MTU

In a Cisco configuration, what is the difference beetween the MTU, ipv4 MTU and the MTU configured into the mpls section of an interface ? interface X mtu 9214 ipv4 mtu 9180 [...] mpls mtu 9200 !...
2
votes
1answer
5k views

IPSec IKEv2 connection failure due to RSA authentication issue

I'm trying to get an IPSec/IKEv2 setup working, which was implement following this I don't understand why, but when a client connects (StrongSwan on Android here), the session is closed because the ...
1
vote
1answer
19 views

vPC between Cisco nexus 9236C and 9336C

I have a Nexus N9K-C9236C and I would like to add an other one to have redundancy with vPC fonctionnality (like describe here). The point is my suppliers don't sell this model anymore because it has ...
0
votes
3answers
44 views

BGP-OSPF route injection doesn't work

Background: BGP is fully functional and works as expected so nothing need to worry about, the problem is the route injection between HK_Office <> HK2 and LON1 <> LON_Office, as you could ...
0
votes
1answer
21 views

Cisco IOS traffic thru VRF

I know, VRFs are meant to create a seperation on layer3. There are certain ways to "break" thru a vrf in a sense with things like: Tunnel interfaces IP helper NetFlow But is there a way ...
1
vote
0answers
12 views

DATA & VOICE VLAN ROUTING BETWEEN 2 ROUTERS [closed]

Good Afternoon All- I would appreciate a little help with a current issue I am facing... I can ping all Network Segments, all Routers, all Switches, and all Servers on the network. PROBLEM IS: I CAN'T ...
0
votes
1answer
20 views

SD-Access -only VNI's and SGT's for policy enforcement within the fabric?

I’m currently getting myself up to speed with Cisco SD-Access. Particularly policy enforcement. Am I right in saying that as SD-Access utilises VNI’s and SGT’s from which to enforce policies. Then ...
0
votes
1answer
52 views

Does Cisco vManage support SSH to a device over an HTTP API?

I have found /newssh/connection/<IP> in Cisco's NMS administration section, but except for the GUI part (vManage's /shell/<uuid>) I haven't found a direct way to run a command on a Cisco ...
0
votes
1answer
56 views

Confusing Cisco enable password format

I'm totally confused by this Cisco password format: enable password level 15 encrypted 382fda4a4a26e6637edac0eb8b8ba4581087d32d Overall string is 40 bytes long: $ echo -n ...
0
votes
0answers
15 views

is there a machine who can read all the packet that he received Even if it's not for him? [closed]

is there a machine who can read all the packet that he received Even if it's not for him ? I mean the ip adresse of this machine not equal to destination ip
0
votes
0answers
8 views

HA Setup WAN Switch Point of Failure [closed]

Had a back and forth email conversation with a new client.. who requested for a Network Upgrade proposal.. So basically we suggested HA setup which consists of the following 2 x FIrewall (active-...
0
votes
0answers
12 views

Arp Access-List Without An Interface [duplicate]

I have dhcp snooping an arp inspection setup on my VLAN. I have a number of clients that need to be statically set on this VLAN but still plug into a DHCP access port on the VLAN. I have ip dhcp ...
1
vote
1answer
36 views

announce a route without add it to routing table

i have two bgp session , one of them is with my IP transit and another one is with my customer, my customer send a /32 to me by bgp and community 12345:666 and i want to announce it to my IP transit ...
2
votes
1answer
945 views

using NAT with a difference IP/range from the outside interface + proxy ARP

I need to NAT the source address of the traffic from my local LAN going out of the ASA firewall. From the diagram above, my outside interface IP on the ASA firewall is set at 192.168.12.2 q1) Am i ...
0
votes
1answer
27 views

Ping ICMP is always sent to the same PC via switch from router

I am quite new to this world and I'm currently to understand why an ICMP ping is always sent to the same PC. In this case, I am sending a ping from PC_F to Server PT. ping 192.168.1.2 In the ...
0
votes
0answers
20 views

How to check if flowspeck works based on netflow monitoring?

I'm looking at netflow9 docs and only usable field I find is FORWARDING STATUS. However if I set my flowspec rule to discard pkts which have size larger then 400 I have some mix of forwarded and ...
-1
votes
1answer
24 views

Why is Cisco router PPPoE client configuration so complicated? [closed]

In some routers like Ubiquiti's UniFi Security Gateway, when you want to connect to internet via PPPoE, all you have to do is go to the web GUI or controller, go to WAN settings, hit the dropdown ...
0
votes
2answers
16 views

Concurrent site-to-site VPN tunnels through dual ISPs (with 2 couples of Cisco ASA) between same devices

I currently have a simple site-to-site VPN setup, connecting machines from site 1 to site 2 through 1 ISP, using a set of ASA 5506X. All is good. I'd like to "double" that setup for ...
0
votes
0answers
9 views

6504E with SUP720-3CXL

i have the following in my stock : 1x 6504E with full fan and trays 2x WS-X6704-10GE with DFC3CXL daughter card 2 x WS-SUP720-3CXL The SUP720-3CXL datasheet shows it has 1G Dram and support 1M ipv4 ...
1
vote
0answers
20 views

Cisco ASA drops packets which match crypto acl. What the reason?

I've some problem with IPSEC tunnel between Cisco ASA and Fortigate. For some reason, packet 10.12.4.0/12 to 192.168.0.0/16 drops by ASA, despite the fact 192.168.0.0/16 is present in crypto ACL. Can ...
0
votes
1answer
42 views

What are the benefits of using MP-BGP multicast address family, under the context of inter PIM domains multicasting?

Under the context of inter PIM domains multicasting, 1 RP on each PIM domain (2 domains), attached with eBGP, with MSDP peering to exchange the actives sources, what are the benefits of using the MB-...
0
votes
0answers
18 views

Cisco Redistribute of SVI routes into BGP

I have a Cisco Nexus and i have 250x SVI on them and each SVI has different prefixes, this sample from one my SVIs : interface VlanXXXXX description USER no shutdown no ip redirects ip ...
3
votes
2answers
2k views

Example of ECMP uses hashing technique

Can someone provide me an example of how Equal-cost multi-path routing uses hashing to decided which packet goes to which? I apologize for that but all I found online are just a definition of ECMP.
0
votes
1answer
228 views

How to set up VoIP inside local network without a VoIP server?

I have a task to set up VoIP inside a small network (~20 Cisco IP Phone 303). Only for calls inside the local network. I have no previous experience with VoIP and I want to do everything in the most ...
0
votes
0answers
23 views

CISCO ASR 1006 , RP1 disabled

I have issue with cisco1006 router, i get this error messages: %IOSXEBOOT-4-BOOT_ACTIVITY_LONG_TIME: (rp/0): load_crash_kernel took: 2 seconds, expected max time 2 seconds %IOSXEBOOT-4-...
-1
votes
1answer
20 views

Cisco C3064PQ advertise 600x /32 Routes

i have a pair of nexus 3064pq in a vpc mode and i want to add 600x /32 network in my advertisement under router bgp XXX , so i want to know if there is no problem with this and it does not cause ...
1
vote
2answers
233 views

Cisco 2960x Stack IOS version mismatch

Hope some of you already have some hands-on experience with that - if you're adding a new switch to the stack and you get IOS version mismatch, can you still copy the bin image from the master to the ...
2
votes
1answer
51 views

upgrading power sequencer on Cisco 5548UP Switch

The situation is that i've 5548UP Switch with very old software version: Software BIOS: version 3.6.0 loader: version N/A kickstart: version 7.0(5)N1(1) system: version 7.0(5)N1(1) Power Sequencer ...
0
votes
2answers
28 views

transfer vlan from one cisco switch to an other through a central cisco switch

I can't figure out how to pass one vlan from one switch to an other: Let's say, I have 2 valns: Vlan 1 and Vlan 2 3 cisco switches: Cisco Catalyst 3560g (central switch) Cisco SG-300 (with native ...
1
vote
0answers
43 views

Cisco site-to-site VPN tunnel Failed to find a matching policy [closed]

I have PaloAlto (PA) and Cisco ASA 5585-X located on two different sites, trying to configure IPsec VPN tunnel. [PA]-----------(internet)-----------[Cisco ASA] If i ping from Cisco ASA side lan to PA ...
5
votes
1answer
115 views

Change BGP Dampening parameters for a specific neighbor

When you configure the BGP Dampening, the configuration is set for all eBGP neighbor in a Cisco router. There is a way to customize the parameters for a specific neighbor ?
1
vote
1answer
1k views

hsrp on both side of router

i tried to create a simple network topology to test the Hot standby router protocol gateway for "server2" and "server3", and the architecture is shown in the figure below. i would like to clarify ...
0
votes
1answer
8 views

Cisco GRE Tunnel on 6504E

i have cisco 6504e with WS-X6704-10GE and VS-S2T-10G-XL and i want to lunch 10-12x GRE tunnel with all of GRE tunnels has around 500-600mbps traffic, i want to know 6504e can handle this GRE traffic ? ...
2
votes
1answer
6k views

How to configure DHCP Relay Agent with multiple VLANs?

I have a network with 2 routers. Router 0 is a DHCP server and Router 1 I assume should be a relay agent. The routing protocol I use is EIGRP. The problem is that PC in vlan 15 and vlan 20 cannot get ...
0
votes
1answer
100 views

How to configure IP addresses in cisco packet tracer?

Hello I am working with Cisco packet tracer. I have two laptops connected to a wireless router with IP addresses assigned using DHCP. The router's Internet IP address is 10.1.0.0 and the LAN address ...
12
votes
2answers
11k views

Error: `EIGRP is restricted to stub configurations only on this platform`

We just bought some new Cat4507R+E distribution switches. When we bought the switches, we asked for an Advanced Services K9 image, but our reseller told us they only come with a Universal K9 image. ...
0
votes
1answer
20 views

Cisco Flexvpn Dvti Setup not working any more if Spoke site is behind NAT

I have set up a platform (consisting of 2x ASR1001X) routers as Flexvpn DVTI hubs to terminate different remote sites (mostly ISR1000, but also older C886s) into different VRFs. The authorization ...
0
votes
1answer
18 views

Enabling interface TenGigE0/0/2/0 pls help

I'm trying to enable just one SFP+ port for testing a 10gbit NIC. I cannot, however, for the life of me find how to enable a port. To me, it would make sense to conf t interfaces TenGigE0/0/2/0 admin ...
0
votes
2answers
56 views

ip dhcp snooping Kills DHCP Ports

I am working on implementing DHCP Snooping on my switches and have found that when I do so it kills the DHCP connection to the clients. The network is as such: The server with DNS is providing DHCP ...
0
votes
1answer
32 views

STP Portfast Networks

I have switched network and on all access ports I've configured spanning-tree portfast edge When I enable spanning-tree portfast networks on trunk ports 1/0/51-52 every access port is blocked. Do I ...
2
votes
1answer
61 views

What is Netflow Scope field?

I was looking at RFC3954, RFC7011 and some Cisco docs - however I can't find the answer for what is the Scope field? What information does it carry?

1
2 3 4 5
70